D-Link DIR-878 安全漏洞

The D-Link DIR-878 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-878 version A1FW101B04.bin, which originates from the unvalidated ServerAddress and Hostname parameters in the SetDynamicDNSSettings function, which can lead to remote command...

Malicious code in odasv-knlu-bofvn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e70a9309b7c08b9b2c91def6f0c6654519e2c2f19f2c09ab44124375b4f15d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180979 Malicious code in teate-thy-sonic-tovrof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0208deae7f9540daf240eb54598b25d15be2ad0732534d5f4cb3f23313c19bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176955 Malicious code in nurnua-sutif-daganayaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782071eb40351b54d4a4abc5f575cfab43e1c11480644f6a58635ef1e26c94b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a612773ddfa05110a41910516fac1ed4f05ec23ad17da8ea6267eb4edff2a554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172845 Malicious code in anak-jalanan-mdn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ab5e7d9a954a44c0631332d06605ac55f67cc8a3c4aea26150834f48b592b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171130 Malicious code in eclipsevoyager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b4b3d9ec4d7c1c71ad0be245964e791f240e70c5261917c23079404905f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170789 Malicious code in alexsophieharrisonanderclark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3677bdd88093ce0e179ca3ac49759e614d235db66900062940b25f3b6a8a40ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170929 Malicious code in astrodreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6d0465eaee0488ba3db21e4f5356a241e030203c42984de6bdd207f98b9ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627bbc97f6e2f0bdcb9413c48bdd17ee25ff69cb471508a7b3eaab4ce1976a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b701c6a37ad01fba820b7ca42e5823ff8ef872a045186bd043ec13db38017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157002 Malicious code in jeep-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691fdd55a4b6f24852450a72c6571c7ee4748b6910b6f5dc1f40e3745ab392bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153507 Malicious code in avomainah-fragis-oguanfoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d052aa4ea60c67986ec8fde140e6ab5a143c799dda6ef018ad1aec386d995e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb8dab42931a232affa1faedf6d6c8503a57ac4c47315328f8bdd7b0ad1ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166486 Malicious code in sunderlan-uyud-vamukanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dca7c4484b3d96ca7390a13d72345715eb07ccb3bd47fe22a01b9456e98b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168058 Malicious code in teagood-yakuza95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0b2b34bb40924da893497e8d98053efc491aac58a5f68fdceacaaf6cc19c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc719f15c2a95caa13b2728c2559ec6429aec6d4508bcb908722192e77826919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161896 Malicious code in nasrul-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414cef0b309c9ae0b3a6b05c08479d81bfbbf8ff910725252e8c32aa67889842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169535 Malicious code in uaragifa-ma-safut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f0c6d64b9707b5d5e6116eb3bb1422f4b6bbaee59971e9a1b68d462442fa37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: do_change_type(): refuse to operate on unmounted/not ours mounts

In the Linux kernel, the following vulnerability has been resolved: dochangetype: refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount2...